CVE-2025-59390-

CVE-2025-59390- The attached POC will allow you to crack the Kerberos signiture in Apache Druid and also, any integer created by ThreadLocalRandom Advisory - Apache Druid’s Kerberos authenticator uses a weak fallback secret when the druid.auth.authenticator.kerberos.cookieSignatureSecret...

latma

Lateral movement analyzer tool Lateral movement analyzer LATMA collects authentication logs from the domain and Azure AD environments and searches for potential lateral movement attacks and suspicious activity, the lateral movement can be in the AD environment or between cloud and on-prem. The to...

impacket

Impacket Copyright Fortra, LLC y sus empresas afiliadas. Todos los derechos reservados. Impacket fue creado originalmente por SecureAuth, y actualmente es mantenido por Core Security de Fortra. Impacket es una colección de clases de Python para trabajar con protocolos de red. Impacket se centra e...

Berserko

Berserko - Kerberos-Authentifizierung für Burp Suite Als Open Source veröffentlicht von NCC Group Plc - http://www.nccgroup.trust/ Entwickelt von Richard Turnbull, richard dot turnbull at nccgroup dot com http://www.github.com/nccgroup/Berserko Veröffentlicht unter der AGPL, siehe LICENSE für...

CVE-2026-75159

An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI error-handling condition. This can interrupt BI Connector availability until...

CVE-2026-75159 MongoDB BI Connector Improper Memory Handling During Failed Kerberos Authentication May Cause Process Termination

An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI error-handling condition. This can interrupt BI Connector availability until...

CVE-2026-75159

CVE-2026-75159 affects MongoDB Connector for BI (mongosqld) deployments configured with Kerberos authentication . An unauthenticated, network-reachable client can trigger a specific GSSAPI error-handling condition during a crafted authentication exchange, causing mongosqld to terminate. This inte...

impacket

Impacket حقوق الطبع والنشر محفوظة لشركة Fortra, LLC والشركات التابعة لها. جميع الحقوق محفوظة. تم إنشاء Impacket في الأصل بواسطة SecureAuth، ويتم صيانته الآن بواسطة Core Security من Fortra. Impacket عبارة عن مجموعة من فئات Python للتعامل مع بروتوكولات الشبكة. يركز Impacket على توفير وصول برمجي منخ...

BloodHound.py-Kerberos

Cos'è questo fork?! Mi serviva bloodhound con supporto Kerberos e ho trovato questo commento. Saltava fuori che esisteva un ramo con supporto all'autenticazione Kerberos fin dall'inizio! Mi sono permesso di unire questo ramo nella master per ottenere le fantastiche esportazioni di BloodHound 4.2+...

mobileiron-exploit

استغلال Tabshell مع مصادقة Kerberos مقتبس من سلسلة استغلال OWASSRF + TabShell أولاً، قم بتصحيح وحدة pyprsp لتمكين تخفيض إصدار WSManStackVersion، وتثبيت التبعيات root@kitploit: $ git clone https://github.com/jborean93/pypsrp $ patch -p0 pyprsp.patch patching file pypsrp/src/pypsrp/complexobjects.p...

ldap_shell

LDAP shell Questo progetto è un fork di ldapshell da Impacket. Fornisce una shell interattiva per l'enumerazione e la manipolazione di Active Directory tramite i protocolli LDAP/LDAPS, risultando utile sia per amministratori di sistema che per professionisti della sicurezza. Installazione Questi...

CVE-2026-76403

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network path could read or alter all relevant data sent from the connector when Kerberos authentication is used with Hypertext Transfer Protocol HTTP Event Collector in Splunk Enterprise. The vulnerability...

CVE-2026-76403

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network path could read or alter all relevant data sent from the connector when Kerberos authentication is used with Hypertext Transfer Protocol HTTP Event Collector in Splunk Enterprise. The vulnerability...

CVE-2026-76403 Improper Certificate Validation through HTTP Event Collector Kerberos Authentication in Splunk Connect for Kafka

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network path could read or alter all relevant data sent from the connector when Kerberos authentication is used with Hypertext Transfer Protocol HTTP Event Collector in Splunk Enterprise. The vulnerability...

CVE-2026-76403

Splunk Connect for Kafka versions below 2.2.7 are affected by an improper certificate validation flaw in the Kerberos authentication path . When Kerberos is used with the HTTP Event Collector in Splunk Enterprise, the HTTP client is built without applying the configured certificate validation opt...

UBUNTU-CVE-2026-72044

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

EUVD-2026-59002

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix stack buffer overflow in multichannel session-key copy Commit 4b706360ffb7 "ksmbd: fix multichannel binding and enforce channel limit" moved the binding-path session key out of the session-wide sess-sesskey CIFSKEYSIZE...

CVE-2026-72044

The CVE-2026-72044 issue is a Linux kernel ksmbd multichannel vulnerability. Root cause: a per-channel key buffer was sized to 16 bytes while two call sites validated/copied session keys against CIFS_KEY_SIZE (40). On binding sessions, an NTLM/ Kerberos session key up to 40 bytes could be written...

CVE-2026-72044

...

EUVD-2026-57191

A Stack-based Buffer Overflow vulnerability CWE-121 vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit...